CVE-2022-28705 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2022-28705

Analyzed

More Info Official Page

Source-f5sirt@f5.com

Published At-05 May, 2022 | 17:15

Updated At-12 May, 2022 | 15:38

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, on platforms with an ePVA and the pva.fwdaccel BigDB variable enabled, undisclosed requests to a virtual server with a FastL4 profile that has ePVA acceleration enabled can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

>>big-ip_access_policy_manager>>13.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:13.1.0:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>13.1.1

cpe:2.3:a:f5:big-ip_access_policy_manager:13.1.1:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>13.1.3

cpe:2.3:a:f5:big-ip_access_policy_manager:13.1.3:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>13.1.4

cpe:2.3:a:f5:big-ip_access_policy_manager:13.1.4:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>13.1.5

cpe:2.3:a:f5:big-ip_access_policy_manager:13.1.5:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>14.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:14.1.0:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>14.1.2

cpe:2.3:a:f5:big-ip_access_policy_manager:14.1.2:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>14.1.3

cpe:2.3:a:f5:big-ip_access_policy_manager:14.1.3:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>14.1.4

cpe:2.3:a:f5:big-ip_access_policy_manager:14.1.4:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>15.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.0:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>15.1.1

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.1:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>15.1.2

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.2:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>15.1.3

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.3:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>15.1.4

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.4:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>15.1.5

cpe:2.3:a:f5:big-ip_access_policy_manager:15.1.5:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>16.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.0:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>16.1.1

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.1:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>16.1.2

cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.2:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>17.0.0

cpe:2.3:a:f5:big-ip_access_policy_manager:17.0.0:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>13.1.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.1.0:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>13.1.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.1.1:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>13.1.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.1.3:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>13.1.4

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.1.4:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>13.1.5

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.1.5:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>14.1.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.1.0:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>14.1.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.1.2:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>14.1.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.1.3:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>14.1.4

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.1.4:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>15.1.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.0:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>15.1.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.1:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>15.1.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.2:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>15.1.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.3:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>15.1.4

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.4:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>15.1.5

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.1.5:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>16.1.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:16.1.0:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>16.1.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:16.1.1:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>16.1.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:16.1.2:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>17.0.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:17.0.0:*:*:*:*:*:*:*

>>big-ip_analytics>>13.1.0

cpe:2.3:a:f5:big-ip_analytics:13.1.0:*:*:*:*:*:*:*

>>big-ip_analytics>>13.1.1

cpe:2.3:a:f5:big-ip_analytics:13.1.1:*:*:*:*:*:*:*

>>big-ip_analytics>>13.1.3

cpe:2.3:a:f5:big-ip_analytics:13.1.3:*:*:*:*:*:*:*

>>big-ip_analytics>>13.1.4

cpe:2.3:a:f5:big-ip_analytics:13.1.4:*:*:*:*:*:*:*

>>big-ip_analytics>>13.1.5

cpe:2.3:a:f5:big-ip_analytics:13.1.5:*:*:*:*:*:*:*

>>big-ip_analytics>>14.1.0

cpe:2.3:a:f5:big-ip_analytics:14.1.0:*:*:*:*:*:*:*

>>big-ip_analytics>>14.1.2

cpe:2.3:a:f5:big-ip_analytics:14.1.2:*:*:*:*:*:*:*

>>big-ip_analytics>>14.1.3

cpe:2.3:a:f5:big-ip_analytics:14.1.3:*:*:*:*:*:*:*

>>big-ip_analytics>>14.1.4

cpe:2.3:a:f5:big-ip_analytics:14.1.4:*:*:*:*:*:*:*

>>big-ip_analytics>>15.1.0

cpe:2.3:a:f5:big-ip_analytics:15.1.0:*:*:*:*:*:*:*

>>big-ip_analytics>>15.1.1

cpe:2.3:a:f5:big-ip_analytics:15.1.1:*:*:*:*:*:*:*

>>big-ip_analytics>>15.1.2

cpe:2.3:a:f5:big-ip_analytics:15.1.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-190	Primary	f5sirt@f5.com

CWE ID: CWE-190

Type: Primary

Source: f5sirt@f5.com

References

Hyperlink	Source	Resource
https://support.f5.com/csp/article/K52340447	f5sirt@f5.com	Vendor Advisory

Hyperlink: https://support.f5.com/csp/article/K52340447

Source: f5sirt@f5.com

Resource:

Vendor Advisory